Infrastructure of a Heist: How Credential Theft Operates at Scale

Executive summary: This report analyzes the infrastructure and costs behind large-scale credential-theft campaigns, detailing the prevalence and rental prices of infostealers (notably LummaC2), malware hosting and crypter services, phishing kits, and YouTube-based distribution/SEO tactics, and examines traffer team structures and earnings — concluding the minimum upfront cost to run a basic campaign is approximately US$1,363.